Skip to content
Naked Security Naked Security

Metal keys beat smart locks in NYC legal battle

A group of tenants in New York City have prevailed in a lawsuit against their landlord's use of smart locks.

A group of tenants in New York City who alleged that they’d been virtually locked out of their Hell’s Kitchen apartment complex by mobile phone controlled, perplexing, privacy-invading, tough or impossible-for-the-visually-impaired-to-use smart locks have reached a settlement that gives them their physical keys back.

In October 2018, the tenants sued their landlord for installing Latch smart locks. As CNET reports, Tuesday’s preliminary settlement says that the landlord is required to provide old-school keys.

As the New York Times tells it, two of the tenants who brought the suit are a couple of elderly artists who’ve been living in what was once a “sprawl of rotting wood” for over four decades.

Mary Beth McKenzie, 72, told the Times that her 93-year-old husband, Tony Mysak, became a virtual shut-in after the landlords installed the Latch smart locks last year. He doesn’t use a cell phone and is blind in one eye, she said. He also has a tough time with the three flights of stairs he needs to climb – stairs that, unlike the elevator, you can get to without having to go through the smart-lock-accessible lobby.

Comings and goings are none of your beeswax

But it’s not just the technology-challenged that rebelled against the smart locks: central to the tenants’ demands was a wider debate over privacy.

According to the plaintiffs, Latch’s privacy policy said that the app could collect location data and use it for marketing purposes.

But Luke Schoenfelder, a co-founder of the New York-based company, has said that the app doesn’t capture, store or use the location data of its users. Nor does it share personal data with third parties for marketing purposes.

Schoenfelder says that Latch is revising the policy to remove any ambiguity. At this point, the company says this about location data:

We do not track your location over time or when you are not using Latch, and we do not share your location with third parties.

We also never capture, store, or use GPS location data of our users. To better understand how your personal device manufacturer uses your location information, we recommend familiarizing yourself with their privacy policies and terms of service.

As far as marketing goes, the privacy policy now states that Latch “may use anonymized and aggregated information to better understand industry trends and better market our products and services.”

Latch also pointed out that all of its products work with mechanical keys.

No precedent

Given that this was a preliminary settlement, as opposed to a court-ordered action, this give-them-keys decision won’t set a legal precedent over how landlords can use smart home technology, but it’s nevertheless kicked off a war of words.

According to CNET, the attorney representing the five tenants who brought the suit called it a “huge victory” for both his clients and tenants throughout New York City:

These types of systems, which landlords have used to surveil, track and intimidate tenants, have been used frequently in New York City. These tenants refused to accept the system, and the negative impact it had on their lives. Hopefully they will be an inspiration for other tenants to fight back.

But the landlords’ attorney said that characterizing this as a win for tenants is “misleading.” She told CNET that the smart lock was only installed on a single door, that tenants could choose to enter a numeric code to get in without using the app, and that they’d been offered codes to use without a phone:

The only reason this settled is because my client didn’t want to waste more time and energy on this. This was by no means a reflection of the court’s opinion on how it would rule on this issue. It is my opinion that we would have succeeded on our motion. However, when parties come to an agreement to resolve litigation, it’s a win for both sides.

Regardless of how the two sides spin it, and regardless of the fact that the settlement doesn’t set a legal precedent, this issue has caught the attention of New York politician. Linda Rosenthal.

Rosenthal, a member of the New York State Assembly who represents the area where the Hell’s Kitchen building is located, introduced a bill that would limit how smart home companies such as Latch use personal data.

The bill would also require that landlords provide traditional means of entry so tenants have the option of not using smart locks.


Forcing account creation instead of a simple bluetooth pairing, “but we won’t share your info–promise.”

Am I the only one noticing the similarity between the spellings of “schadenfreude” and a certain Latch founder?


Smart locks aren’t smart. They’re a safety hazard. No one should ever be forced to type in codes or use electronic devices to access their home. They deserve scorn for taking a simple, reliable concept and making it complex. And they deserve every liquid “accidently” spilled on them, until they’re replaced with keys.


Wow! One of their “features” is holding the phone up to any lock you have access to and the door will open. So, if someone finds your phone or steals it while it’s unlocked, they can wait till you stop looking and follow you home and hold your phone up to your door and gain entry. That doesn’t sound very safe to me. Sounds a bit scary. Maybe there is a failsafe to prevent that if you call support, but by then if they already followed you home prior, they can just wait inside your home while you call from wherever you were until you get home. No thank you.


A thief could do that just as easily with a bunch of metal keys. Steal it, hide out of sight while you search for it, then follow you home, and come back later to burgle when you are out. In practice thieves rarely do that as it takes quite a lot of time and if it became a pattern then the police would setup traps. Likewise keeping a stolen phone unlocked for many hours is difficult, and risks getting caught. There is much more profit in fencing it for $50, and getting back on the street ASAP to steal another.


Reading between the lines, I think the tenants won out on disability discrimination grounds, rather than on the surveillance and tracking issue.

From the landlord’s point of view metal keys are expensive and hard to manage because of the need to physically distribute and collect them, and because master keys (issued to security guards, cleaners etc) are high risk security wise, but necessary for people to do their jobs.

If the landlords had replaced the metal keys with swipe cards similar to the type used in most hotels, or contact-less key fobs as used in most office buildings, then they would have saved most the costs associated with issuing and revoking keys, especially master keys, without any of the disability discrimination issues around using a smartphone app. They still would have got a log of every time each tenant entered or left their building, but far fewer people would have cared, so they would have got away with the change.


it is possible the real reason for this court case was that the tenants weren’t consulted first. No landlord should have the right to change how you enter your own home without asking you first. Had this been a pre-condition of the tenancy agreement, fine, but is was in mid-contract. Big Fat Hairy ‘No’.


A tenancy agreement cannot lawfully require use of electronically controlled locks in the US, on religious and cultural grounds. There are several groups of people for whom that’s taboo on their day of rest or more generally to avoid the devil.

Similarly, electronically controlled locks can be a problem for those with disabilities, as in this story.

Most hotels and major apartment complexes maintain several ground-floor rooms with standard keys to accommodate both types of people.

The landlord in this story is a jerk trying to manipulate less lucrative, older tenants into leaving the building, so he could flip the apartments.


Leave a Reply

Your email address will not be published. Required fields are marked *

Subscribe to get the latest updates in your inbox.
Which categories are you interested in?
You’re now subscribed!